Intelligent Threat Correlation and Risk Assessment for Enterprise Cloud Security Using Generative AI and Behavioral Analytics Framework
DOI:
https://doi.org/10.15662/IJARCST.2024.0706044Keywords:
Enterprise Cloud Security, Generative Artificial Intelligence, Behavioral Analytics, Threat Correlation, Risk Assessment, Cybersecurity, Anomaly Detection, Security Information and Event Management, Cloud Threat Intelligence, Incident ResponseAbstract
The rapid adoption of cloud computing has significantly transformed enterprise information technology infrastructure while introducing complex cybersecurity challenges, including sophisticated cyberattacks, insider threats, unauthorized access, data breaches, and advanced persistent threats. Traditional security monitoring systems often struggle to identify interconnected threats because they rely on isolated alerts, predefined rules, and signature-based detection mechanisms. This research proposes an intelligent threat correlation and risk assessment framework integrating Generative Artificial Intelligence (GenAI) and behavioral analytics to improve enterprise cloud security. The proposed framework combines cloud security logs, user activity records, network traffic patterns, identity access information, and threat intelligence to identify abnormal behaviors and correlate multiple security events. Generative AI supports contextual threat interpretation, automated incident summarization, and security recommendations, while behavioral analytics establishes normal activity patterns and detects deviations. A risk assessment mechanism evaluates detected threats according to severity, probability, potential business impact, and asset criticality. The framework aims to improve threat detection accuracy, reduce false-positive alerts, strengthen incident prioritization, and support proactive security decision-making. The research also discusses implementation considerations, privacy protection, model reliability, scalability, and human supervision. The proposed approach provides an intelligent and adaptive foundation for strengthening enterprise cloud security against evolving cyber threats
References
1. Meng, T., Jing, X., Yan, Z., & Pedrycz, W. (2020). A survey on machine learning for data fusion. Information Fusion, 57, 115–129. https://doi.org/10.1016/j.inffus.2019.12.001
2. Ibrahim, F. A. M., & Hemayed, E. E. (2019). Trusted cloud computing architectures for infrastructure as a service: Survey and systematic literature review. Computers & Security, 82, 196–226. https://doi.org/10.1016/j.cose.2018.12.014
3. Gadige, C. D. (2023). Scalable CRM workflow automation for high-volume customer onboarding: An event-driven Salesforce architecture. The Eastasouth Journal of Information System and Computer Science, 1(1), 253–265. https://doi.org/10.58812/esiscs.v1i01.1295
4. Karuturi, Y. (2023). Energy-aware capacity governance for large-scale SAP HANA deployments. International Journal of Research and Applied Innovations, 6(3), 6000-6009.
5. Bitragunta, S. L. V. (2022). High level modeling of high-voltage gallium nitride (GaN) power devices for sophisticated power electronics applications. Journal of Artificial Intelligence, Machine Learning and Data Science, 1(1), 2011-2015.
6. Sahu, S. K. (2019). Designing a dual-run migration architecture for Medicare CRM: Event synchronization, system-of-record transition, and legacy platform retirement. migration, 9, 28-1.
7. Kalakoti, M. K. R. (2023). AI-driven infrastructure orchestration for large-scale e-commerce platforms during global product launches. International Journal of Computer Technology and Electronics Communication, 6(4), 7388-7399.
8. Randhi, K. S. (2022). A scalable integration framework for enterprise application metadata aggregation and synchronization. International Journal of Research Publications in Engineering, Technology and Management, 5(2), 6564–6581.
9. Kopparthi, G. S. (2022). The future of medicine: AI’s role in healthcare innovation. TPM–Testing, Psychometrics, Methodology in Applied Psychology, 29(S1), 1–6.
10. Tarigoppula, S. (2022). Zero-trust security architecture for hybrid enterprise cloud environments using AWS native services. International Journal of Engineering & Extended Technologies Research (IJEETR), 4(6), 5783-5794.
11. Tasnim, M., Akter, A., Rahman, M. R., Khan, M. A. N., Jakir, T., Chowdhury, J. A., ... & Hossain, A. (2023). Federated Learning for Privacy-Preserving Cyber Threat Intelligence Sharing. International Journal of Research and Applied Innovations, 6(5), 9605-9616.
12. Bheemisetty, N. (2024). From fragmentation to agility: Nautilus architecture for risk management modernization. International Journal of Advanced Research in Computer Science & Technology (IJARCST), 7(4), 10673-10682.
13. Venkatasalam, K., Rajendran, P., & Thangavel, M. (2019). Improving the accuracy of feature selection in big data mining using accelerated flower pollination (AFP) algorithm. Journal of medical systems, 43(4), 96.
14. Kommineni, R. (2023). Hub-and-spoke GitOps delivery for multi-tenant SaaS: Multi-source applications, deterministic environment isolation, and run-once lifecycle tasks. International Journal of Research Publications in Engineering, Technology and Management (IJRPETM), 6(2), 8401–8408.
15. Reddy, K. V. (2021). UVM methodology for industry-specific applications using AI in hardware verification. International Journal of Engineering & Extended Technologies Research, 3(3), 3094–3107.
16. Karrothu, A. (2024). Automated risk-based security controls for vulnerability detection and prevention across cloud-native software development lifecycles. International Journal of Humanities and Information Technology, 6(03), 147–166.
17. Potdar, A. (2023). Designing Secure Sovereign Cloud Architectures for Enterprise Data Analytics and Digital Transformation. International Journal of Science, Research and Technology, 6(5), 10698-10707.
18. Alex Roney Mathew. (2019). Malware analysis of API calls using FPGA hardware level security. International Journal for Research in Applied Science & Engineering Technology, 7(3), 898–900.
19. Kalabhavi, V. (2023). Automated quote generation using AI for product configuration, pricing and external order integration in SAP CPQ. International Journal of Humanities and Information Technology, 5(2), 110–124.
20. Jinna, K. R., & Thilagaraj, S. V. (2022). From application server to pod: A readiness-scoring framework for migrating legacy J2EE middleware workloads to enterprise Kubernetes platforms. International Journal of Engineering & Extended Technologies Research (IJEETR), 4(3), 4953-4963.
21. Beeram, S. (2023). AI-driven zero trust identity security in Microsoft Azure: Adaptive risk-based access using Microsoft Entra ID. International Journal of Research Publications in Engineering, Technology and Management, 6(5), 9827–9831.
22. Basavala, S. R. (2022). Security-by-design: Threat modeling and requirements for enterprise applications. International Journal of Engineering & Extended Technologies Research, 4(1), 4358–4368.
23. Gurram, S. (2024). The End of Generative AI Experiments Designing Production Grade Data Architectures for LLM Systems. International Journal of Computer Technology and Electronics Communication, 7(1), 8233-8242.
24. Mounika, B., & Thota, S. (2022). A Cloud-Based AutoML Framework for Intelligent Sales Performance Optimization in Salesforce CRM Environments. International Journal of Artificial Intelligence, Data Science, and Machine Learning, 3(2), 143-153.
25. Gujarathi, M. (2023). Observability patterns for multi-step validation pipelines in distributed enterprise systems. International Journal of Emerging Trends in Computer Science and Information Technology, 4(4), 282–285. https://doi.org/10.63282/3050-9246.IJETCSIT-V4I4P129
26. Ponugoti, M. (2023). Frameworks for ensuring compliance in digital platform governance. International Journal of Engineering & Extended Technologies Research (IJEETR), 5(6), 7575-7586.
27. Suddala, V. R. A. K. (2024). Driving innovation and compliance in global payment platforms through predictive analytics and DevOps automation. International Journal of Advanced Research in Computer Science & Technology (IJARCST), 7(4), 10662-10672.
28. Shaik, N. (2023). Zero downtime, zero trust: Automating certificate security at scale. International Journal of Engineering & Extended Technologies Research (IJEETR), 5(4), 6963-6978.
